$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft File: 3GiS42IN0PH9YpguEY4pdX3Iyz0.mft (raw, json) Hash identifier: R/3HIAMJ9tC7tOphlzQgAUEm+QuKO/DIJLYqvKcFEDY= Subject key identifier: AE:C4:B3:39:17:81:4B:C0:0A:65:EB:9C:EC:3E:1D:FD:8D:38:30:10 Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Certificate serial: 158C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft Manifest number: 152E Signing time: Fri 16 May 2025 17:07:51 +0000 Manifest this update: Fri 16 May 2025 17:07:51 +0000 Manifest next update: Fri 16 May 2025 23:07:51 +0000 Files and hashes: 1: 3GiS42IN0PH9YpguEY4pdX3Iyz0.crl (hash: Op0LObeFDEzrxVEPOHlaJkBMi6hcsv454eRJJ7FHdtg=) 2: 5D0c-WWWWw4FF1ELtp0U_cPBQd8.roa (hash: +BAnoDks/I9MJXYriLgObyMPkMI3GpRgHTysE1uOmJ0=) 3: 75ys0PrDinDFKrNoR4e23Idu8m4.roa (hash: hqT2Mqlf2A+MLPQIu6Z0Qjy6Mwg44SLEln0zoQxySso=) 4: RHNCRs2Sd7uHRk_s1RRFIaMhVkg.roa (hash: CeZWKFta3q7XOY1PMeung3ofIhHqs04YGuQxyt3uHH4=) 5: SXeeQW1Tm6k_jhOMuM8v2YGQaHA.roa (hash: 5C4Kz2tvXlKpPp0zUdoEHwlfyvHduEz/cUpmRj3xDAg=) 6: bzm7-jLcv3Wh87N9Z5qhkKuezDw.roa (hash: FPsYvAAOaQMSgDGGxAOpHgM9zH3kX06iyzaLE9msP8c=) 7: c8cUFZDH6O5exb6j4uFUNQZBVwA.roa (hash: ChxxrTVExxNhWtyTkhs7Lts9bjh8WwMtzGdZlOqpElw=) 8: iPCP6IuT-0QUdjr7rWq4x3eahUs.roa (hash: 392WqWeFbPlBXrnmWzfBSMp8DlyfnVN0seKH8/K1kVA=) 9: mOP5PXAJj2kQLFwCgVjCZczJXBo.roa (hash: wfV0HRjPUvGW/UwP9JCls20oaaBHIMZWwQL7DaYqcbw=) 10: rJq0JCq-nYCiaPtjdTG4aGX_lew.roa (hash: pRKxjBukzQitNjXwkG8mzwM2l2UavR4iKrfomRa7B/c=) 11: rlzdZPwqK5Oa0YBChiK_h_0EwVY.roa (hash: oIVPo7fR1TB38YsoJ++yXQ6k9SlvuWne2dWr+5XWVGw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 23:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5516 (0x158c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Validity Not Before: May 16 17:07:51 2025 GMT Not After : Apr 9 06:41:24 2026 GMT Subject: CN=AEC4B33917814BC00A65EB9CEC3E1DFD8D383010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:79:0f:fa:67:80:fa:5d:2e:95:a1:98:8c: 49:15:6b:7c:b6:6b:21:fc:03:e9:69:75:27:1f:63: 35:4e:93:f0:74:1c:93:1e:dd:35:8e:2f:e5:d6:40: 1b:5f:12:fd:cc:78:a9:5b:c2:74:89:e7:af:f8:c3: 18:e2:d3:e7:b8:0d:c6:63:2d:ca:c4:ca:b4:6b:ea: 4b:54:e6:6d:a9:02:d4:74:c0:a8:da:2a:a6:de:d8: 0e:b3:9b:c2:ed:0f:e9:68:f6:09:f8:41:6a:7a:4d: 56:b3:8a:db:e0:be:ad:fb:85:b1:e0:0b:88:d3:bb: 26:1d:48:96:09:cb:ee:cb:6f:14:5f:4d:dd:fc:ec: 98:94:32:8e:8e:00:de:15:eb:d0:3a:2d:55:cf:a9: 09:2a:8d:5a:08:1e:1a:72:cd:b9:cc:49:e9:79:22: 61:c1:79:56:2b:1f:15:2b:20:d5:96:30:be:1e:d1: 92:11:20:52:24:3a:e4:c1:6b:a0:3d:4d:76:f9:6e: d9:94:40:f7:43:58:86:f3:2d:ca:8d:97:13:23:18: 9a:8f:af:c2:b3:83:40:46:86:39:f9:3a:11:4d:b5: 41:56:73:5c:54:d9:44:1c:4e:72:d5:5f:8a:34:63: 31:84:47:5d:8d:92:52:f7:c0:b7:80:8a:0b:02:88: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C4:B3:39:17:81:4B:C0:0A:65:EB:9C:EC:3E:1D:FD:8D:38:30:10 X509v3 Authority Key Identifier: keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:84:8e:ef:1d:d1:a7:78:83:d5:df:60:e5:3e:f6:5e:34:82: 36:d9:31:bb:e2:dc:af:ed:f7:dd:e0:d4:bd:ae:2a:a3:42:49: 66:d2:ae:40:3c:15:d4:9c:e4:ba:68:25:1f:f9:b6:06:e0:db: 61:1d:ec:db:a8:32:8f:49:d3:b6:a8:88:a4:ec:d6:06:bf:a5: a2:6f:45:ca:9c:51:79:ff:4a:71:6e:f4:70:fe:1e:c0:8e:11: 56:8f:b5:97:6f:7c:fb:1f:5f:7a:74:21:11:39:d5:a6:d0:d1: 13:59:8c:a1:ec:83:d7:fd:4f:01:77:e6:fa:f6:40:e5:a5:c9: 59:8e:51:28:be:c7:0e:41:59:04:75:82:c1:02:81:79:7e:15: 59:6c:23:9e:f6:b7:51:6d:cc:21:18:e5:b5:69:d6:ca:a6:fe: 7a:44:27:31:a1:6d:30:f4:2d:17:23:f5:6b:a7:39:98:79:46: 5b:85:e2:66:28:83:d6:6f:71:53:41:c8:ca:c8:b9:0f:fd:a2: f1:ab:23:31:4a:8b:7b:dd:0a:70:8d:4f:3e:e1:4a:56:cd:45: b3:49:fc:98:aa:c8:d8:57:39:5b:0a:90:3d:11:cc:83:0e:55: d9:13:45:99:d0:03:45:6e:2f:fd:15:d8:a1:c7:4e:15:12:4a: f2:69:1f:44 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREM2 ODkyRTM2MjBERDBGMUZENjI5ODJFMTE4RTI5NzU3REM4Q0IzRDAeFw0yNTA1MTYx NzA3NTFaFw0yNjA0MDkwNjQxMjRaMDMxMTAvBgNVBAMTKEFFQzRCMzM5MTc4MTRC QzAwQTY1RUI5Q0VDM0UxREZEOEQzODMwMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC563kP+meA+l0ulaGYjEkVa3y2ayH8A+lpdScfYzVOk/B0HJMe 3TWOL+XWQBtfEv3MeKlbwnSJ56/4wxji0+e4DcZjLcrEyrRr6ktU5m2pAtR0wKja Kqbe2A6zm8LtD+lo9gn4QWp6TVazitvgvq37hbHgC4jTuyYdSJYJy+7LbxRfTd38 7JiUMo6OAN4V69A6LVXPqQkqjVoIHhpyzbnMSel5ImHBeVYrHxUrINWWML4e0ZIR IFIkOuTBa6A9TXb5btmUQPdDWIbzLcqNlxMjGJqPr8Kzg0BGhjn5OhFNtUFWc1xU 2UQcTnLVX4o0YzGER12NklL3wLeAigsCiJ3JAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUrsSzOReBS8AKZeuc7D4d/Y04MBAwHwYDVR0jBBgwFoAU3GiS42IN0PH9Ypgu EY4pdX3Iyz0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS8zR2lTNDJJTjBQSDlZcGd1RVk0cGRYM0l5ejAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNHaVM0MklOMFBIOVlwZ3VFWTRwZFgzSXl6MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvM0dpUzQySU4wUEg5 WXBndUVZNHBkWDNJeXowLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADSEju8d0ad4g9XfYOU+9l40gjbZMbvi3K/t993g1L2uKqNCSWbSrkA8FdSc 5LpoJR/5tgbg22Ed7NuoMo9J07aoiKTs1ga/paJvRcqcUXn/SnFu9HD+HsCOEVaP tZdvfPsfX3p0IRE51abQ0RNZjKHsg9f9TwF35vr2QOWlyVmOUSi+xw5BWQR1gsEC gXl+FVlsI572t1FtzCEY5bVp1sqm/npEJzGhbTD0LRcj9WunOZh5RluF4mYog9Zv cVNByMrIuQ/9ovGrIzFKi3vdCnCNTz7hSlbNRbNJ/JiqyNhXOVsKkD0RzIMOVdkT RZnQA0VuL/0V2KHHThUSSvJpH0Q= -----END CERTIFICATE-----Generated at Fri May 16 22:48:47 2025 by rpki-client